Re: Nesting domain groups under local groups

fpbear <dontsendhere@xxxxxxxxxx> wrote:
This is a government system and the domains all belong to the same
agency. Although it takes tremendous paperwork effort to make changes
to a mission critical system and get trusts established between the
domain islands. So even though they serve the same user base, the
domain controllers remain isolated. We might get a nice forest with
cross domain trust within a few years, but we will need to come up
with a solution that works today for traveling users.

I'm still confused, I guess. Why can't they belong to domainX, and *always*
log into domainX no matter where they are - whether they can reach a domainX
DC or not?

Would nesting the groups in this manner cause any difficulties for
applications that have to check the role membership, or would it
raise any questions on Active Directory best practices?

I'm really not sure how to answer that, sorry. You might try an AD group.


"Lanwench [MVP - Exchange]" wrote in message
I'm a bit confused as to what you mean by "attach these laptops to
other domains" or why they'd ever disjoin their corp domain to join
another - why aren't they always logging into *your* domain (with
cached credentials) when they're out of the office, so none of this
would matter? WinXP can belong to only one domain (or workgroup) at a
time, but
that doesn't mean they can't pass along the appropriate credentials
for their "visiting" domain when they've made a network connection
to it... If I've misunderstood please correct.



.

Relevant Pages

  • Re: Login to multiple domain
    ... trusts cannot be set up. ... Just log into domain A with cached credentials, ... > log into from the Win 2K/XP login menu? ... > able to join multiple domains? ...
    (microsoft.public.win2000.active_directory)
  • Hartford FYI/Raise Your Hand
    ... I'm not going to Hartford but if someone wants an extra hand online ... (or phone for that matter) ... and trusts me w/their card info ... ...
    (rec.music.artists.springsteen)
Quantcast